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(1) Real Party in Interest 

A statement identifying by name the real party in interest is contained in the brief. 

(2) Related Appeals and Interferences 

The following are the related appeals, interferences, and judicial proceedings known to 
the examiner which may be related to, directly affect or be directly affected by or have a bearing 
on the Board's decision in the pending appeal: 

None 

(3) Status of Claims 

The statement of the status of claims contained in the brief is correct. 

(4) Status of Amendments After Final 

The appellant's statement of the status of amendments after final rejection contained in 
the brief is correct. 

(5) Summary of Claimed Subject Matter 

The summary of claimed subject matter contained in the brief is correct. 

(6) Grounds of Rejection to be Reviewed on Appeal 

The appellant's statement of the grounds of rejection to be reviewed on appeal is correct. 

(7) Claims Appendix 

The copy of the appealed claims contained in the Appendix to'the brief is correct. 

(8) Evidence Relied Upon 

6424954 Leon 7-2002 

6,546,377 Gravel 1 et al 4-2003 
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(9) Grounds of Rejection 

The following ground(s) of rejection are applicable to the appealed claims: 

Claim Rejections - 35 USC §103 

1 . The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claims 1-120 are rejected under 35 U.S.C. 103(a) as being unpatentable over Leon (U.S. 
Patent No 6,424,954) in view Gravell et al (U.S. Patent No. 6,546,377). 

3. As per claim 1, Leon teaches a cryptographic device (SMD, 110a, 110b comprise a 
cryptographic module) for securing data on a computer network (network 100a t 100b, fig 1A, 
IB) comprising a processor (processor, 210) programmed to authenticate (authenticate) users 
(users, 120, fig 1A, IB) on the computer network (network 100a, 100b, fig 1A, IB) for secure 
processing of a value bearing item (postal indicium, fig 9) wherein the processor include a state 
machine for determine a state corresponding to availability of one or more commands, the 
cryptographic device enters an operational state in which it continues to authenticate the user 
with respect to one or more transactions requested by the user (see abstract, figs 5a -7, column 9 
line 35-67), a cryptographic engine (cryptographic module) for cryptographically protecting 
data, and an interface (interface, 222, 236, fig 2A) for communicating with the computer network 
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{see column 4 line 21-55). Leon fails to teach a system programmed to authenticate a plurality of 
user for secure processing if a value bearing item and memory for storing security device 
transaction data for ensuring authenticity of a user, wherein the security device transaction data 
is related to the one of the plurality of users and a the cryptographic module is remotely located 
from the user wherein once the user is authenticated. However, Gravell et al teaches a system 
programmed to authenticate a plurality of user for secure processing if a value bearing item and 
memory for storing security device transaction data for ensuring authenticity of a user, wherein 
the security device transaction data is related to the one of the plurality of users and a the 
cryptographic module is remotely located from the user wherein once the user is authenticated 
{see abstract, fig 7, column 6 line 20-7 line 54). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify Leon's inventive concept to 
include Gravell et aPs a system programmed to authenticate a plurality of user for secure 
processing if a value bearing item and memory for storing security device transaction data for 
ensuring authenticity of a user, wherein the security device transaction data is related to the one 
of the plurality of users and a the cryptographic module is remotely located from the user 
wherein once the user is authenticated because this would have protected the privacy of those 
transaction and the privacy of the user thereby making easier for the system to retrieve and 
identify the user of the system thereby eliminated stolen and relocated meter problems and 
simplifies meter management in general 

4. As per claims 2-8, Leon teaches a cryptographic device wherein the state machine 
includes one or more of an uninitialized state, an initialized state, an operational state, an 
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administrative state, an exporting shares state, an importing shares state, and an error state (see 
abstract, figs 5a -7, column 9 line 59-67), 

5. As per claim 9, Leon teaches a cryptographic device wherein on or more command 
corresponding to the uninitialized state includes a command for start initializing (figs 6a-6e, 
column 10 lines 10-16). 

6. As per claim 10, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the initialized state includes commands for one or more of get status 
command, initialize access control database command, logon command, logoff command, query 
current user role command, query current user ID command, session management commands, 
audit entry creation command, generate master key set command, and generate transport key pair 
commands (see abstract, figs 5a -7, column 10 lines 10-16, 13 lines 26-47). 

1. As per claim 11, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the operational state include commands for one or more of access 
control, session management, key management, and audit support (see column 11 lines 36-43). 

8. As per claim 12, Leon teaches a cryptographic device wherein the commands for access 
control include one or more of transition to administrative state command, logon command, 
logoff command, query current user role command, query current user ID command, view access 
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control database command, change password command, set clock command, and set Status 
command (see fig 5b, column 13 lines 63-14 line 31). 

9. As per claim 13, Leon teaches a cryptographic device wherein the commands for session 
management include one or more of open session command, close Session command, compute 
session MAC command, verify session, MAC command, session encrypt command, and session 
decrypt command (see column 13 lines 36-62). 

10. As per claim 14, Leon teaches a cryptographic device wherein the commands for key 
management include one or more of export transport public key command, start importing MKS 
command, create MKS shares command, generate MKS command, activate MKS command, 
delete dormant MKS command, global decrypt and MAC command, compute MAC command, 
verify MAC, and encryption and MAC translation commands (see column 13 lines 36-62). 

11. As per claim 1 5, Leon teaches a cryptographic device wherein the commands for audit 
support include one or more of create audit entry command, create audit key command, and 
export audit verification key command (see abstract, figs 5f, see column 18 line 18-40, 24 line 
60-25 line 5). 

12. As per claim 16, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the administrative state include commands for one or more of create 
account command, delete account command, modify account command, view access control 
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database command, end admin command, logon command, logoff command, query current user 
role command, query current user ID command, set clock command, get status command, 
session management commands, and audit entry creation command (see abstract, figs 5a -7, see 
column 9 line 35-67). 

13. As per claim 17, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the exporting shares state include commands for one or more of 
logon command, logoff command, query Current User Role command, query current user ID 
command, export share command, abort export command, get status command, session 
management commands, and audit entry creation command (see column 8 line 63-9 line 19). 

14. As per claim 18, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the importing shares state include command for one more of logon 
command, logoff command, query current user role command, query current user ID command, 
export transport public key command, import share command, combine shares command, set 
status command, session management commands, and audit entry creation command (see 
column 8 line 63-9 line 19). 

15. As per claim 19, Leon teaches a cryptographic device wherein the one or more 
commands corresponding to the error state include commands for one or more of get status 
command, and access control queries command (see column 10 lines 39-46). 
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16. As per claim 20, Leon teaches a cryptographic device further comprising computer 
executable code to keep track of a present operational state (see abstract, figs 5a -7, see column 
9 line 35-67). 

17. As per claim 21, Leon teaches a cryptographic device wherein the processor is 
programmed to verify that the authenticated user is authorized to assume a role and perform a 
corresponding operation (see fig 5 A, column 12 lines 30-42, table 1 in column 12). 

18. As per claim 22, Leon teaches a cryptographic device wherein the cryptographic device 
includes a computer executable code for preventing unauthorized disclosure of data (see fig5E- 
5E-2, column 17 lines 47-54, 19 lines 33-42). 

19. As per claim 23, Leon teaches a cryptographic device wherein the cryptographic device 
includes a computer executable code for supporting multiple concurrent users and maintaining a 
separation of roles and operations performed by each user (see fig 1A, IB). 

20. As per claims 24-27, Leon teaches a cryptographic device wherein the value bearing 
item include a postage value including a postal indicium comprises a digital signature, a 
postage amount, an ascending register of used postage and descending register of available 
postage (see fig 8F t table 3 column 42). 
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21 . As per claim 28-33, Leon teaches a cryptographic device wherein the value bearing item 
is a ticket, a bar code, a coupon, a currency, a traveler's check, a voucher (see fig 9). 

22. As per claim 34, Leon teaches a cryptographic device wherein each security device 
transaction data includes an ascending register value, a descending register value, a respective 
cryptographic device ID, an indicium key certificate serial number, a licensing ZIP code, a key 
token for an indicium signing key, user secrets, a key for encrypting user secrets, data and time 
of last transaction, last challenge received from a respective client subsystem, an operational 
state of the respective device, expiration dates for keys, and a passphrase repetition list (see fig 
8F t table 3 column 42). 

23. As per claim 35, Leon teaches a cryptographic device wherein each security device 
transaction data includes information to define the present operational state of the device (see 
abstract, figs 5a -7, see column 9 line 35-67) 

24. As per claim 36, Leon teaches a cryptographic device wherein the processor is capable of 
sharing a secret with a plurality of other cryptographic devices (see column 13 lines 48-62). 

25. As per claim 37-40, Leon teaches a cryptographic device wherein the processor and the 
cryptographic engine generate a master key set (MKS) including a Master Encryption Key 
(MEK) used to encrypt keys when stored outside the device and a Master Authentication Key 
(MAK) used to compute a DES MAC for signing keys when stored outside of the device 
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exported to other cryptographic devices by any cryptographic device and wherein the 
cryptographic engine is programmed to perform one or more of Rivest, Shamir and Adleman 
(RSA) public key encryption, DES, Triple-DES, DSA signature, SHA-1, and Pseudo-random 
number generation algorithms (see column 13 lines 48-62). 

26. As per claim 41, Leon teaches a cryptographic device wherein at least one of the plurality 
of users is an enterprise account (see fig 1). 

27. As per claims 42 and 44, Leon teaches a method for securing (SMD, 110a, 110b 
comprise a cryptographic module) data (postal/metering information) on a computer network 
(network 100a, 100b f fig 1A, IB) including a plurality of users (users, 120, fig 1A, IB) 
comprising authenticating (authenticate) and authorizing (authorizing) the plurality of users 
(users, 120, fig 1A, IB) for secure processing of a value bearing item (postal indicium, fig 9) 
and determining a state machine for availability of one or more commands (see abstract, figs 
5a -7, column 9 line 35-67). Leon fails to teach a system programmed to authenticate a plurality 
of user for secure processing if a value bearing item and memory for storing security device 
transaction data for ensuring authenticity of a user, wherein the security device transaction data 
is related to the one of the plurality of users and a the cryptographic module is remotely located 
from the user wherein once the user is authenticated. However, Gravell et al teaches a system 
programmed to authenticate a plurality of user for secure processing if a value bearing item and 
memory for storing security device transaction data for ensuring authenticity of a user, wherein 
the security device transaction data is related to the one of the plurality of users and a the 
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cryptographic module is remotely located from the user wherein once the user is authenticated 
(see abstract, fig 1, column 6 line 20-7 line 54). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify Leon's inventive concept to 
include Gravell et al's a system programmed to authenticate a plurality of user for secure 
processing if a value bearing item and memory for storing security device transaction data for 
ensuring authenticity of a user, wherein the security device transaction data is related to the one 
of the plurality of users and a the cryptographic module is remotely located from the user 
wherein once the user is authenticated because this would have protected the privacy of those 
transaction and the privacy of the user thereby making easier for the system to retrieve and 
identify the user of the system thereby eliminated stolen and relocated meter problems and 
simplifies meter management in general. 

28. As per claim 43, Leon teaches a method for securing of printing the value bearing item 
(see fig 9). 

29. As per claim 45, Leon teaches a method for securing of loading a security device 
transaction data related to the cryptographic device when the user requests to operate on a value 
bearing item (see column 9 lines 1-10). 

30. As per claim 46, Leon teaches a method for securing of authenticating the identity of 
each user and verifying that the identified user is authorized to assume a role and to perform a 
corresponding operation (see column 8 line 45-61). 
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31. As per claims 47-53, Leon teaches a method wherein the state machine includes one or 
more of an uninitialized state, an initialized state, an operational state, an administrative state, an 
exporting shares state, an importing shares state, and an error state (see abstract, figs 5a -7, see 
column 9 line 35-67). 

32. As per claim 54, Leon teaches a method wherein on or more command corresponding to 
the uninitialized state includes a command for start initializing (see figs 5A, 5B, 6). 

33. As per claim 55, Leon teaches a method wherein the one or more commands 
corresponding to the initialized state includes commands for one or more of get status command, 
initialize access control database command, logon command, logoff command, query current 
user role command, query current user ID command, session management commands, audit 
entry creation command, generate master key set command, and generate transport key pair 
commands (see fig 5 A, 5B, column 10 line 10-16). 

34. As per claim 56, Leon teaches a method wherein the one or more commands 
corresponding to the operational state include commands for one or more of access control, 
session management, key management, and audit support (see abstract, figs 5fi see column 18 
line 18-40, 24 line 60-25 line 5). 
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35. As per claim 57, Leon teaches a method wherein the commands for access control 
include one or more of transition to administrative state command, logon command, logoff 
command, query current user role command, query current user ID command, view access 
control database command, change password command, set clock command, and set Status 
command {see column 8 line 45-62). 

36. As per claim 58, Leon teaches a cryptographic device wherein the commands for session 
management include one or more of open session command, close Session command, compute 
session MAC command, verify session, MAC command, session encrypt command, and session 
decrypt command {see fig5E-5E-2, column J 7 lines 47-54, 19 lines 33-42). 

37. As per claim 59, Leon teaches a method wherein the commands for key management 
include one or more of export transport public key command, start importing MKS command, 
create MKS shares command, generate MKS command, activate MKS command, delete dormant 
MKS command, global decrypt and MAC command, compute MAC command, verify MAC, 
and encryption and MAC translation commands {see fig 5E-5E-2, column 17 lines 47-54, 19 
lines 33-42). 

38. As per claim 60, Leon teaches a method wherein the commands for audit support include 
one or more of create audit entry command, create audit key command, and export audit 
verification key command {see abstract, figs 5f, see column 18 line 18-40, 24 line 60-25 line 5). 
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39. As per claim 61, Leon teaches a method wherein the one or more commands 
corresponding to the administrative state include commands for one or more of create account 
command, delete account command, modify account command, view access control database 
command, end admin, command, logon command, logoff command, query current user role 
command, query current user ID command, set clock command, get status command, session 
management commands, and audit entry creation command (see column 8 lines 63-9 line 33). 

40. As per claim 62, Leon teaches a method wherein the one or more commands 
corresponding to the exporting shares state include commands for one or more of logon 
command, logoff command, query Current User Role command, query current user ID 
command, export share command, abort export command, get status command, session 
management commands, and audit entry creation command (see fig 5 A, column 12 lines 30-42, 
table 1 in column 12). 

41 . As per claim 63, Leon teaches a method wherein the one or more commands 
corresponding to the importing shares state include command for one more of logon command, 
logoff command, query current user role command, query current user ID command, export 
transport public key command, import share command, combine shares command, set status 
command, session management commands, and audit entry creation command (see fig 5A, 
column 12 lines 30-42, table 1 in column 12). 
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42. As per claim 64, Leon teaches a method wherein the one or more commands 
corresponding to the error state include commands for one or more of get status command, and 
access control queries command (see column 10 lines 39-46). 

43. As per claims 65-68, Leon teaches a method of printing a postage value including a 
postal indicium comprises a digital signature, a postage amount, an ascending register of used 
postage and descending register of available postage (see fig 8F, table 3 column 42). 

44. As per claim 69-71, Leon teaches a method or printing a ticket, a bar code, a coupon, 
(see fig 9). 

45. As per claim 72, Leon teaches a security system (SMD, 110a f 110b comprise a 
cryptographic module) for securing data (postal/metering information) in a computer network 
(network 100a t 100b, fig 1A, IB) comprising a plurality of user terminals (users, 120, fig lA t IB) 
coupled (connected) to the computer network (network 100a, 100b, fig 1A, IB), a cryptographic 
device (cryptographic key) remote from the plurality of user terminals and coupled to the 
computer network, wherein the cryptographic device (SMD, 110a, 110b comprise a 
cryptographic module) includes a state machine (state diagram/method, fig 6A) for determining 
a state machine for availability of one or more commands available to authenticating user. Leon 
fails to teach a plurality of security device transaction data for ensuring authenticity of the one or 
more users, wherein each security device transaction data is related to a user and of managing 
value of available to user. However, Gravell et al teach a plurality of security device transaction 
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data for ensuring authenticity of the one or more users, wherein each security device transaction 
data is related to a user and of managing value of available to user {see abstract, fig 1, column 6 
line 20-7 line 54). Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify Leon's inventive concept to include Gravell et al's 
plurality of security device transaction data for ensuring authenticity of the one or more users, 
wherein each security device transaction data is related to a user and of managing value of 
available to user because this would have protected the privacy of those transaction and the 
privacy of the user thereby making easier for the system to retrieve and identify the user of the 
system thereby eliminated stolen and relocated meter problems and simplifies meter 
management in general. 

46. As per claim 73, Leon teaches a security system wherein the security device transaction 
data related to a user is loaded into the cryptographic device when the user requests to operate on 
a value bearing item {see fig 9). 

47. As per claims 74-80, Leon teaches a method wherein the state machine includes one or 
more of an uninitialized state, an initialized state, an operational state, an administrative state, an 
exporting shares state, an importing shares state, and an error state (see abstract, figs 5a -7, see 
column 9 line 35-67). 

48. As per claim 81, Leon teaches a method wherein on or more command corresponding to 
the uninitialized state includes a command for start initializing {see figs 5A, 5B, 6). 
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49. As per claim 82, Leon teaches a method wherein the one or more commands 
corresponding to the initialized state includes commands for one or more of get status command, 
initialize access control database command, logon command, logoff command, query current 
user role command, query current user ID command, session management commands, audit 
entry creation command, generate master key set command, and generate transport key pair 
commands (see fig5A, 5B, column 10 line 10-16). 

50. As per claim 83, Leon teaches a method wherein the one or more commands 
corresponding to the operational state include commands for one or more of access control, 
session management, key management, and audit support (see abstract figs 5f, see column 18 
line 18-40, 24 line 60-25 line 5). 

51. As per claim 84, Leon teaches a method wherein the commands for access control 
include one or more of transition to administrative state command, logon command, logoff 
command, query current user role command, query current user ID command, view access 
control database command, change password command, set clock command, and set Status 
command (see column 8 line 45-62). 

52. As per claim 85, Leon teaches a cryptographic device wherein the commands for session 
management include one or more of open session command, close Session command, compute 
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session MAC command, verify session, MAC command, session encrypt command, and session 
decrypt command (see fig5E-5E-2, column 17 lines 47-54, 19 lines 33-42). 

53. As per claim 86, Leon teaches a method wherein the commands for key management 
include one or more of export transport public key command, start importing MKS command, 
create MKS shares command, generate MKS command, activate MKS command, delete dormant 
MKS command, global decrypt and MAC command, compute MAC command, verify MAC, 
and encryption and MAC translation commands (see fig 5E-5E-2, column 17 lines 47-54, 19 
lines 33-42). 

54. As per claim 87, Leon teaches a method wherein the commands for audit support include 
one or more of create audit entry command, create audit key command, and export audit 
verification key command (see column 8 line 45-62). 

55. As per claim 88, Leon teaches a method wherein the one or more commands 
corresponding to the administrative state include commands for one or more of create account 
command, delete account command, modify account command, view access control database 
command, end admin command, logon command, logoff command, query current user role 
command, query current user ED command, set clock command, get status command, session 
management commands, and audit entry creation command (see fig 5E-5E-2, column 17 lines 
47-54, 19 lines 33-42). 



Application/Control Number: 09/690,083 Page 19 

Art Unit: 3621 

56. As per claim 89, Leon teaches a method wherein the one or more commands 
corresponding to the exporting shares state include commands for one or more of logon 
command, logoff command, query Current User Role command, query current user ID 
command, export share command, abort export command, get status command, session 
management commands, and audit entry creation command (see fig 5A, column 12 lines 30-42, 
table 1 in column 12). 

57. As per claim 90, Leon teaches a method wherein the one or more commands 
corresponding to the importing shares state include command for one more of logon command, 
logoff command, query current user role command, query current user ED command, export 
transport public key command, import share command, combine shares command, set status 
command, session management commands, and audit entry creation command (see fig 5E-5E-2, 
column 1 7 lines 47-54, 19 lines 33-42). 

58. As per claim 91, Leon teaches a method wherein the one or more commands 
corresponding to the error state include commands for one or more of get status command, and 
access control queries command (see abstract, figs 5fi see column 18 line 18-40, 24 line 60-25 
line 5). 

59. ' As per claim 92, Leon teaches a security system comprising computer executable code to 
keep track of a present operational state (see column 8 line 45-62). 
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60. As per claim 93, Leon teaches a security system wherein the processor is programmed to 
verify that the authenticated user is authorized to assume a role and perform a corresponding 
operation {see column 8 line 45-62). 

61. As per claim 94, Leon teaches a security system wherein the system includes a computer 
executable code for supporting multiple concurrent users and maintaining a separation of roles 
and operations performed by each user {see fig J A, IB). 

62. As per claims 95-98, Leon teaches a secured system wherein a postage value including a 
postal indicium comprises a digital signature, a postage amount, an ascending register of used 
postage and descending register of available postage {see fig8F f table 3 column 42). 

63. As per claim 99-100, Leon teaches a security system wherein the value bearing item 
include a bar code is a ticket {see fig 9). 

64. As per claim 101, Leon teaches a security system wherein each security device 
transaction data includes information to define the present operational state of the device {see fig 
6A, column 9 line 35-67). 

65. As per claim 102, Leon teaches a security system wherein the cryptographic engine is 
programmed to perform one or more of Rivest, Shamir and Adleman (RSA) public key 
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encryption, DES, Triple-DES, DSA signature, SHA-1, and Pseudo-random number generation 
algorithms (see column 11 lines 51-12 line 4, 13 line 47-62). 

66. As per claim 103, Leon teaches a method or printing a ticket, a bar code, a coupon, (see 
fig 9). 

67. As per claim 104, Leon teaches a method for securing data (SMD, 110a, 110b comprise a 
cryptographic module) in a computer network (network 100a, 100b t fig 1A, IB) having a 
plurality of user terminals (users, 120, fig 1A, IB) the method comprising and verifying that a 
user is authorized to assume a role and determining a state in a state machine for availability of 
one or more commands (see fig 1A, IB, 5A, 6A, column 9 lines 34-67). Leon fail to teach an 
inventive concept of storing information about a plurality of users using the plurality of terminals 
in a database remote from the plurality of securing the information about the users in the 
database by one or more of cryptographic devices remote from the plurality of user terminals 
storing a plurality of security device transaction data wherein each transaction data is related to 
one of the plurality of users and a cryptographic device manages value of available for the value 
bearing item. However, Gravell et al teaches an inventive concept of storing information about a 
plurality of users using the plurality of terminals in a database remote from the plurality of 
securing the information about the users in the database by one or more of cryptographic devices 
remote from the plurality of user terminals storing a plurality of security device transaction data 
wherein each transaction data is related to one of the plurality of users and a cryptographic 
device manages value of available for the value bearing item (see abstract, fig 1, column 6 line 
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20-7 line 54). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify Leon's inventive concept to include Gravell et al's an 
inventive concept of storing information about a plurality of users using the plurality of terminals 
in a database remote from the plurality of securing the information about the users in the 
database by one or more of cryptographic devices remote from the plurality of user terminals 
storing a plurality of security device transaction data wherein each transaction data is related to 
one of the plurality of users and a cryptographic device manages value of available for the value 
bearing item because this would have protected the privacy of those transaction and the privacy 
of the user thereby making easier for the system to retrieve and identify the user of the system 
thereby eliminated stolen and relocated meter problems and simplifies meter management in 
general. 

68. As per claim 105, Leon teaches a method of printing the value bearing item (see fig 9). 

69. As per claim 106, Leon teaches a method of loading a security device transaction data 
related to a user into one of the one or more of cryptographic devices when the user requests to 
operate on a value bearing item (see column 9 lines 28-33, 13 lines 48-62, 15 lines 23-32). 

70. As per claim 107, Leon teaches a method of loading a security device transaction data 
related to the cryptographic device when the user requests to operate on a value bearing item (see 
column 9 lines 28-33, 13 lines 48-62, 15 lines 23-32). 
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71 . As per claim 108, Leon teaches a method of authenticating the identity of each user and 
verifying that the identified user is authorized to assume a role and to perform a corresponding 
operation (see column 8 lines 45-9 line 10). 

72. As per claims 109-1 15, Leon teaches a method of determining an uninitialized state, an 
initialized state, an operational state, an administrative state, an exporting shares state, an 
importing shares state, and an error state (see fig5A, 6A t column 9 lines 45-67). 

73. As per claims 1 16-120, Leon teaches a method of printing a postage value including a 
postal indicium comprises a digital signature, a postage amount, or a ticket (see fig 9). 

(10) Response to Argument 

Applicants argue that Examiner asserted that Leon teach a system wherein a remote 
cryptographic device is used to authenticated wherein a plurality of user operated on a computer 
network. Examiner respectfully disagrees with Applicant's characterization of Examiner's 
assertion. In paragraph 5 of the non-final rejection dated August 2 nd , 2005, Examiner indicated 
that Leon fails to teach a system programmed to authenticate a plurality of user for secure 
processing if a value bearing item and memory for storing security device transaction data for 
ensuring authenticity of a user, wherein the security device transaction data is related to the one 
of the plurality of users and a the cryptographic module is remotely located from the user 
wherein once the user is authenticated . However, Gravell et al teaches a system programmed to 
authenticate a plurality of user for secure processing if a value bearing item and memory for 
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storing security device transaction data for ensuring authenticity of a user, wherein the security 
device transaction data is related to the one of the plurality of users and a the cryptographic 
module is remotely located from the user wherein once the user is authenticated (see abstract, fig 
I, column 6 line 20-7 line 54). Examiner never indicated that Leon teach a system to authenticate 
a plurality of user. In contrary, Examiner asserts this deficiency in Leon's disclosure and that 
Gravell cure this deficiency. 

Applicant further argue that Examiner had not identified part of Gravell that teaches a 
state machine for determining a state corresponding to availability of on or more commands. 
Again Applicant have misquoted Examiner assertion. Examiner Asserted that Leon disclosed a 
system wherein a processor include a state machine for determine a state corresponding to 
availability of one or more commands, the cryptographic device enters an operational state in 
which it continues to authenticate the user with respect to one or more transactions requested by 
the user (see abstract, figs 5a -7, column 9 line 35-6). 

Applicant further argument that there suggestion to combine the references is improper, 
the examiner recognizes that obviousness can only be established by combining or modifying the 
teachings of the prior art to produce the claimed invention where there is some teaching, 
suggestion, or motivation to do so found either in the references themselves or in the knowledge 
generally available to one of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 
USPQ2d 1596 (Fed. Cir. \98&)md In re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). 
In this case, Although Leon's system is physical and Gravell' s system is virtual, the combination 
is operable system both operations are being done online through network connection. 
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(11) Related Proceeding(s) Appendix 

No decision rendered by a court or the Board is identified by the examiner in the Related 
Appeals and Interferences section of this examiner's answer. 

For the above reasons, it is believed that the rejections should be sustained. 
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